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The inventive device comprises sensors (SE) for 
detecting biometric characteristics BM (e.g. finger 
pints) and an input device for inputting 
authentication data AUTINF (e.g. PIN). A data 
processing device (DE) of the inventive device 
determines authentication information FPAUTINF from 
the biometric characteristics BM. Said information is 
tested by the same testing device PE which tests the 
authentication information AUTINF to be input via the 
input device EE. As a result, the device EG can be used 
by different users and in the same manner as devices 
without sensors for biometric characteristics. The 
authentication rules (e.g. for mobile telephones and 
SIM cards) do not have to be changed in order to 
permit an authentication using biometric 
characteristics. 
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(57) L'appareil comprend des detectenrs (SE) pour la 
detection de caracteristiques biometriques 13M (par 
cxcmplc, cmprcintcs digitalcs) ct un dispositif d'entrec, 
pour 1'inlroduction de donnees d'aulhenlificalion 
AUTINF (par exeinple PIN). Un dispositif de traiteinent 
de donnees (DE) de l'appareil calcule, a partir des 
caracteristiques biometriques 13M, les informations 
d'authentification FPAUTINF qui sont contrfilccs par lc 
meme dispositif de conlrole PE que pour les 
informations d' authentication AUTINF a entrer via le 
dispositif d'entree EE. L/appareil EG peut ainsi etre 
utilise par different* utilisateurs et de la m§me facon que 
les apparcils sans dctcctcurs pour des caracteristiques 
biometriques. Les regies d'authenlifioalion (par exemple 
pour la telephonie mobile via cartes SIM) ne doivent par 
etre changees pour permettre une authentication via des 
caracteristiques biometriques. 



(57) The inventive device comprises sensors (SE) for 
detecting biometric characteristics 13M (e.g. finger pints) 
and an input device for inputting authentication data 
AUTINF (e.g. PIN). A data processing device (DE) of 
the inventive device determines authentication 
information FPAUTINF from the biometric 
characteristics BM. Said inlbrmation is tested by the 
same testing device PF which tests the authentication 
information AUTINF to be inpul via the input device EE. 
As a result, the device EG can be used by different users 
and in the same manner as devices without sensors for 
biometric characteristics, 'the authentication rules (e.g. 
for mobile telephones and STM cards) do not have to be 
changed in order to permit an authentication using 
biometric characteristics. 
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Abstract 

Electronic device and method for the authentication of * user 
of oaid device 

The device has sensors (SB) for detecting biometric 
characteristics ism (for example fingerprints) and an input 
means for the input of authentication data autinf (for example 
a PIN) , A data-processing means (DE) of the device determines 
from tho biometric characteristics BM authentication 
information ffPAUTXNF, which is checked by the same checking 
means as the aur.henr.1 nation information AUTINF to be input 
via the input device be. as a result, the device EG can be 
used by different users and in the same way as devices without 
sensors for biometric characteristics, The authentication 
rules (for example for mobile phones via SIM cards) do not 
have to be changed in order to permit an authentication by 
meane of biometric characteristics. 
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GR 98 P 1550 
Description 

Electronic device and method for the authentication of si user 
of said davioft 

Vexy different types u£ electronic device fur whiuh a user hat* 
to be authenticated before it is used are known. Important 
examples are oomputere in variouo eonf igurationo (devices for 
Information processing) and telecommunication devices r such as 
mobile phones ror example. Some devices are generally 
protected against unauthorized use, for example by a password; 
in the case of other devices, only certain functions are 
protected against unauthorised access (for example by a so- 
called Personal Identification Number, PIN) . This also 
includes th* protection of access to certain data or services, 
even if they are not made available by the device but by other 
devices in a computer network or communications network. 

No doubt the most frequent type of input of authentication 
information today is input via a keyboard or keypad of the 
device. After input, the correctness of the information input, 
and consequently the authorization of the user carrying out 
the input, is checked by a checking means in the device or in 
a computor network or communications network. In the case of 
mobile phones conforming to the OSM standard, this takes place 
by a data -processing means on the so-called SIM card of the 
device checking whether the pin input matches the information 
stored on the SIM card. l£ this is the case, the SIM card 
enables the mobile phone for use. The security of the 
telephone customer is enhanced here by the fact that the OSM 
standard does nor. allow the PIN to be storad in the device but 
only in encrypted form on the SIM card. 
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For some time, technologies which allow other forma u£ uaer 
authentication have been available. These technologies are 
based on the detection of user- specif ic biomotric 
characteristics by special sensors. Sensors for fingerprint 
detection are an important example of this, other biometrie 
characteristics , such as the texture of Che retina of the 
human eye or the characteristics ol a human voice for example, 
are likewise already used in some devices. 

The characteristics detected by the sensors are usually 
compared in a data- processing means of the device or nt a 
communications network with the known characteristics of an 
authoriaod user, and if they coincide sufficiently! access to 
the desired service, the required data or the chosen device 
function Is enabled. 

in some types of device , it appears to be advisable to combine 
the two types of authentication mentioned with one another. 
For example in the case of mobile phones, it is undoubtedly 
desirable not only that they can be used by their owner by 
means of a fingerprint sensor, but also that other persons who 
have been notified or the VIM or who would like to use the 
device wlLh their own SIM card are in a position to UBe it 
within the limits of the authorisation to which they are 
entitled. In addition, the authentication by means of a 
fingerprint could occasionally fail or not be possible , for 
example because the hands of the user are soiled or the user 
is wearing gloves. For these or similar reasons, it is 
desirable or necessary that one or more users or a device can 
authenticate themselves on it by different means. Biometric 
authentication is to be possible in these oases along with 
authentication by pin input. In the case of mobile phones 
conforming to the QSM standard, it is additionally the case 
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that the Btandard prescribes the possibility of authentication 
by PIN input as mandatory. 

It follow* from the situation described that use of 
conventional blometric authentication methods is not possible 
in the case of mobile phones conforming to the gsm standard, 
because PIN auLheiiLiu^Uioxx with the SIM card is a mandatory 
requirement for them for reasons of compatibility with the GSM 
standard alone. The at first oeemingly obvious possibility of 
storing the PIN in the devioe and transferring this stored PIN 
to the SIM card for checking purport** 1f hhere is a successful 
outcome of the check to ascertain whether the detected 
fingerprint coincides wlLh the aLored fingerprint of an 
authorised user is discounted because storage of the PIN in 
the mobile phone anywhere else than within the SIM card ic 
prohibited by Mm GSM standard for security reasons. Biometric 
authentication would consequently only come into consideration 
in these cases ae ttu additional safeguard. Such an additional 
safeguard is not required, however, in view of the high 
security of the authentication of the PIN input and would 
probably also not be accepted by many users . 

The invention is therefore based on the object of specifying a 
technical teaching which allows the combination of a biometric 
user authentication with an authentication by PIN input even 
in the case of mobile phones conforming to the GSM standard or 
in similar circumstances, it being Intended for one form of 
authentication to be sufficient in each case. The user is 
consequently La h*ve the choice of which type of 
authentication he wishes to use. It is conceivable, however, 
that a specially distinguished user (for example the owner of 
the device) is given the possibility of setting the logic AND 
operation of che two types or authentication on tne device. 
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This object is achieved by a ri«vic« or a method according to 
one of che patent claims. 

The invention provide© that biometric characteristic© of the 
uaer are detected by a sensor mean© and information serving 
for authentication is determined with the aid of mathematical 
method* from the detected biometric characteristics . AS a 
result, authentication information which can be checked by the 
same checking means as authentication information input by the 
user via an information input deviee (for oxamplc a keyboard 
or keypad) is obtained at the end of the evaluation of the 
biometric characteristic*. In the simplest the result of 

the evaluation of the fingerprint is the same PIN which users 
could also have input via the keyboard or keypad. This PIN is 
not stored in the device, however, but is calculated from 
biometric characteristics of a user detected by a sensor 
means . 

This type of evaluation of the biometric characteristics 
detected by a oynw^A* means makes this type of authentication 
equivalent in outcome to the authentication by meane of 
keyboard or keypad input, and the customary interface for 
checking the validity o£ the authentication information can 
remain unchanged. In particular, it is not necessary for any 
requirements prescribed by standards to be changed. The two 
methods of authentication can be used alongside one another 
without any difficulties; the user has at amy time and in 
every situation the free choice between the two methods. It is 
of course also posslhln to xisa both in an AND combination, in 
which only the user who successfully negotiates the two 
authentication paths is given access. 
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The invention is described in more detail below on the basis 
of preferred exemplary embodiment* and wlLh Lhe aid or 
figures* 

Figure 1 ohowo an exemplary embodiment of the invention in 
which all the methods and means are integrated in one device. 

Figure 2 shows am exemplary embodiment of the invention in 
which the checking means is not located within the device. 

Figure .3 shows an exemplary embodiment of the invention in 
wnicn a display device for the display of authentication 
information is integrated in the device. 

A quite specific but important embodiment of the invention is 
a mobile phone conforming to the Q8M standard, which has a 
fingerprint sensor for user authentication. This fingerprint 
sensor is a special case of the sensor means (UK) represented 
in Figure i, if a user of the device (EG) places a finger on 
this fingerprint sensor and the device is awaiting an 
authentication, ouch ac the input of a PIN or cuper PIN or 
PZN2 (partly manufacturer- dependent) for example, the 
fingerprint «Ansor detects the corresponding b1ometr1e 
characteristics (BM) ot the user concerned and passes them to 
a data processing means (DE) . 

In the case of the OSM mobile phone, this data processing 
means is the processor already present in any case in the 
mobile phone in conjunction with software running on it. On 
the other hand, however, the fingerprint sensor (or more 
generally; the sensor means) could also have iLs own processor 
unit i on which a special software performing the fingerprint 
detection runs, so that, in the sense of this invention, the 
data processing means is fully or partly integrated into the 
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einior means* 9ince the fingerprint detention Itself, as weni 
as other methods of detecting biometric characteristics and 
their realization on data processing means of different 
configurations (and partitioning into subsystems ©r assembly 
from known hardware modules) , are sufficiently known to a 
person skilled in the art, this part of realising the 
invention no doubt does not present any particular problems. 

According to the preweut invention, this data processing 
device then determines information suitable for the 
authentication of the user from the detected biometric 
characteristics. In the simplest case, this is the PIN (or 
PIN2 or the like) at the user - accepted as entitled - stored 
in an encrypted form on the SIM card* This FIN is then 
transferred to the SIM card for checking in the same way as if 
it had been input by the uaer via the numeric keypad 
(information input device) of the mobile phone. The cheeking 
process known to every person skilled in the art and provided 
in the gsm standard then proceeds in the checking means of the 
mobile phone (SIM card, if appropriate in conjunction with the 
data proceooing means of the device) . If the authentication 
information FPAUTXNF) is correct/ i.e. coincides with the PIN 
stored on th« ATM r.ard, the device function protected by the 
authentication (for example network access, etc.) is enabled. 

A decisive advantage of the solution according to the 
invention described is that the fingerprint detection in the 
case of the authorized user leads to transfer of the user's 
PIN to the SIM card, since this allows the security 
requirements prescribed by the GSM standard to remain 
completely unchanged. Other, at first perhapu seemingly 
obvious solutions do not have this attributes In any event , 
any other solution would require either *n additional input of 
the pin via the keypad or a way of avoiding or changing the 

• 6 



Received 0ct-11-00 03:38pm 



Fran- 



To-Smart t Blggar Page 007 



Oct. II. '2000 3:52PM 



CA 02329311 2000-10-19 



No. 0151 P. 0 



GSM standard. Au additional input o£ the PIN via the keypad 
would only be meaningful if the fingerprint detection wer? 
conceived as an additional security measure in addition to the 
PIN input. 

Such an additional authentication is ot course also possible 
with the preeent invention. In this case, it would be 
nocesaary for the authentication information determined from 
the sensor data not to be transferred to the SIM card. Instead 
of tblfi, a false PIN could, for example, be deliberately cent 
to the SIM card or an input error or abnormal termination of 
the input or the like could be simulated. The SIM card would 
then again request PIN input. If the PIN input coincides or is 
compatible with the one determined, the data processing means 
(DE) could transfer this PIN to the SIM card, whereupon the 
latter would provide the enabling function. 

of course, the PIN determined from the sensor data does not 
have to be identical with the SIM card PIN* If the standard or 
- in tha case of other devices - the respectively relevant 
security protocols allow, the checking means could also check 
two different itemB of authentication information to ascertain 
whether they match one another. 

In the aaee of other devices, which are not subject to the GSM 
standard, the authentication information FPAUTINF calculated 
from the sensor data could, evan 1n the case of authentication 
by sensor data alone (that is to say independent. ly of and 
along with PIN input) , be different from the authentication 
information AUTINP input via a keypad, as long as the checking 
means detects that the two match in the sense that they both 
refer to the authorized us^r. 
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in principle, all mathematical representations (functions) 
which assign to a fingerprint or other BM a PIN or uumta other 
form of (generally alphanumerically encoded) authentication 
information AUTINF and satisfy the following conditions come 
into consideration as methods of calculation for 
aufchariM flat Inn Information FPAOTINF from a BMi 

a) sufficiently similar BMs lead to the same authentication 
iuCorciuition FPAUTINF; 

b) sufficiently different BMs lead to different authentication 
information PPAUTINF. 

c) it is virtually impoosibla for an unauthorized user to 
determine (for example guess) the authentication information 
fpautinf from the BM or without Knowledge of the BM. 

The condition a) is intended to ensure that the fingerprint 
detection is sufficiently robust with respect to minor 
disturbances. Ohherwi.se, the rejection rate of authorized 
users would be too high, condition b) ensures that 
f ingerprlntw or different users lead to different 
authentication information PPAUTINF with an adequately high 
degree of probability. The significance of condition o) is 
obvious . 

A person sKilled in the art is familiar with various 
mathematical representations whlvh satisfy these requirements 
(possibly to a greater or lesser extent) • A representation 
with these attributes is provided by so-called vector 
quantization. This method, which is actually known to a person 
skilled in the arc, is to be explained here only to the extant 
which appears to be required for an understanding of the 
invention. 

IX this method is applied for the purposes of the present 
invention, it is firstly presupposed that the biometrie 
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characteristics detected by the sensor means can be brought 
into the form of a so-called characteristic vector. This 
assumption is not a restriction in practice, since the sensox- 
data can always be represented as an ordered n tuple of n 
measurement data (characteristic vectors) . The charaeteriotic 
vectors form an n-dimensional space. Tn thia space, a set of 
characteristic vectors (codebook vectors) would exist and a 
degree of disparity (degree ol similarity for biometric 
characterioties) would be defined. For each sample vector 
there is in this space a cell, which is defined by the rule 
that, for each characteristic vector in a cell, the sample 
vector of this cell is the nearest: sample vecr.nr in the sense 
of this degree ol disparity. 

Each sample vector is assumed to be assigned an item of 
information suitable in principle for authentication, A sample 
vector is assigned Che correct authentication information (for 
exaiqple the actual PIN) . It is obvious from these explanations 
that the determination of the nearest sample vector to a 
sample vector which corresponds to the detected sensor data 
Iflads to the correct information (actual PIN) in the case of 
the authorized user and otherwise supplies false 
authentication information. The error rates of this method can 
be optimized II it is ensured that the characteristic vector 
aeeociatcd with the biometric characteristics u£ the 
authorized user is one of the sample vectors. This can be 
achieved by the system adapting itself to the biometric 
characteristics of the authorized user (eodabook adaptation) 
in an initialisation phase. 

The vector quantisation is not the only method which can be 
used in conjunction with the invention. A person skilled in 
the arc is ramillar with other methods, which therefore do not 
have to be explained here, 
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If the literal sense is taken as a basis - the calculation of 
the authentication information FFAUTXKF from the bioraetrlc 
characteristics of a user by vector quantisation actually also 
involves a "storage of the PIN 11 in the device/ since each 
sample veccor o£ the codabook is indeed assigned an item of 
authentication information (FPAUTINF) that is possible in 
principle. However, in virtually all cases (apart from one, 
namely that of the oample vector of the authorized user) this 
is not really suitable for authentication. For example, in the 
case of a five-place alphanumeric PIN, in the ideal case all 
conceivable fins, and for each one a sample vacror. are 
therefore stored in such a way that only if there is 
sufficiently accurate detection of the sample vector in the 
sensor can the valid PIN be addressed. Although the correct 
PIN is tnerefore accordingly "stored in the device" , it is 
lose among the great number of conceivable PiNs, and can only 
be found for the person with the correct: biomecric 
characteristica. This state of affairs is not intended when 
the standard prohibits the ptorago of the PIN in the device. 

in the case of the GSM standard, the storing of the PIN in the 
device is not allowed- Often, however, a change of the PTN is 
necessary, for example because it has become Known to a third 
party. If, however, the PIN is determined from the fingerprint 
(i.e. calculated), this initially appears to be impossible, 
since it is not possible to change a fingerprint or other 
biometrlc characteristics. In order nevertheless to give the 
user the possibility of changing his PIN. the invention 
provides in a preferred embodiment that, instead of only one 
method of calculation, a whole set of such methods are 
available in the davic*. Each individual method of calculation 
could be assigned a consecutive number, so that a user 
authorised to do so could at any time change the method used. 
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SItipr MC3h method (Mi,...,Mn) calculates a different PiW 
(FPAUTINF1, • • 1 1 FPAUTINFn) for one and the same CingexpriuL 
(BM) , the user can select f ruin ae many PINS as there are 
different methods for their calculation. 

This embodiment of the invention can likewise ba realised with 
vector quantization, although indeed nor just one codebook but 
a number of codabooks of sample vectors are to be provided. 
Each codebook has a number and can be selected via this 
number « Other methods possibly depend on a parameter. If this 
parameter is ahangad, a different mathematical representation 
is obtained. If the dependence on this parameter ia 
sufficiently complex, it becomes virtually impossible to guess 
how the authentication information changes when the parameter 
changes . 

Certain types of neural networks (for example so -called multi- 
layer percept rona) are suitable tor realizing representations 
of this type, in the case of solutions based on such neural 
networks; the PIN is actually not stored anywhere as a 
sequence of characters but merely (implicitly encrypted) in 
the network architecture and in the weight coefficients. 

This intpiementationai variant ot the present invention appears 
to be of interest in particular with regard to the fact that 
many people require a series o£ different passwords for quite 
different purposes or devices. It is becoming increasingly 
more difficult to remember these many passwords. If a number 
of methods (Ml,...Mn) (mathematical representations) are used 
for calculating a number of items of authentication 
information (FPAUTINF1 , FPAUTINFn) from a single 
characteristic vector (or ©ot of sensor data) , this problem is 
reduced to the deteotion of user-specific inalienable 
biometric Characteristics by suitable sensors. 



11 



Received 0ct-11-00 03:36pm Pn 



To-Smart t Blggar Paft 012 



.11. 2000 3:50PM 



CA 02329311 2000-10-19 



No. 0151 P. 13 



For the selection ot a certain method, all that is necessary 
iB to input an identification number or such a method in a 
context of Lhe user interface to be provided for thifi purpose. 
As a result, the data processing means can be correspondingly 
set up by software* 

Of course, the biometric characteristics of a number of people 
could also be linked with the correct PIN or with a number of 
correct PIN*. If, as an exception, the device is to be usable 
only for one person, i.o. with only juat one SIM card, the 
enabling function may be additionally linked with further 
safety mechanisms surh as d«viee codas, etc. The invention 
allows any kind of flexibility here, together with the highest 
security tuid compatibility with the standard. 

Specifically if a PIN is changed, a further useful embodiment 
of the invention, in which a display 1s provided for 
displaying an item at authentication information, may be 
helpful. A display o£ this type is already present in any case 
on many devices of this type and can therefore also be used 
for these purposes. If a user wishes to change hio 
authentication information (AUTINF) , for example the PIN, to 
be input via the keypad and matching the SIM card or stored on 
it, it is possible in the case of aome methods of calculation 
that not all the conceivable character-digit combinations are 
available to him as PINs, for example because the codebook is 
smaller than the number of all conceivable PINs. In this case, 
changing the parameter of the method of calculation used (for 
example changing the codebook number, or changing a parameter 
of a neural network) is sufficient to change the assignment of 
the PINs to the sample vectors and consequently the PIN 
assigned to its individual sample vector. After that, he could 
not change the PIN on the SIM card (or mora generally: the PTN 

-12- 



Rictlvtd 0ct-1 1-00 03:36pm Fron- 



To-Snart ft Biwar Pan 013 



Oct. II. 2000 0:50PM 



CA 02329311 2000-10-19 



No. 8151 P. 14 



to be input) in the same e«nst without knowing it. This* is 
necessary, However, tor further use in the sense of our 
object. The changed pin is therefore preferably divulged Lu 
the authorised user by a corresponding, possibly one-off, 
brief diaplay of this PIN after the change on a dieplay of the 
device- Other aolutiono (for example mailing the new PIN) are 
conceivable . 

The invention is of course not restricted Cu mobile phones, in 
particular noL to mobile phones conforming to the OSM 
standard- It is quite evidont to a person ©killed in the art 
from the present description how the invention is to be 
realized in the case of other devices or systems. 

In particular, the invention la noL restricted to the case in 
which the checking unit (PE) is integrated into tho device. 
Figure 2 ohowo the important case of a device which is 
connected, for example via a communications network, to at 
least one other device, in which the checking means Is 
located* However, even the data processing unit or that part 
of the data processing unit (DE) which is responsible for the 
calculation of the authentication information FPAUTINF from 
the biometric characteristics BM of the user does not 
necessarily have to he 1 orated in the device. Of course, the 
device does not have to have an Integrated sensor means (SB) 
or axi ixiLegraLed Keyboard or keypad (EE) . These means could of 
course also be connected to the device in the form of external 
modules. These embodiments of the invention are intended to be 
protected by the method claims. 
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1. An electronic device (BO) , in particular a device for 
information prooeooing or for telecommunication! with 

a) a censor means (SB) for detecting biometric characteristics 
(BM) of a usar of the device, in particular for detecting 
fingerprints, 

b) a data-proceasiug metuu* (DE) for determining information 
(FPAUTINF) serving for the authentication of a user from 
detected biometric characteristics, 

c.) an input means (EE) for the input of information with the 
possibility of using this input means for r.he inpur. of 
information (AUTINF) serving for authentication, 
d) a checking means (PB) for checking the determined or input 
authentication information and for enabling device functions 
for this user if the cheek is successful. 

2. The device as claimed in claim l, the data-processing 
meant* (DE) ol which can be set up in such a way that the 
authentication information (PIN) to be input via the input 
means for successful authentication checking is identioal to 
authentication information (PPPIN) determined from the 
biometric characteristics of an authorized user. 

3. The device as claimed in one of the preceding claimB, the 
data-proceooing means (DE) of which has a number of methods 

( M1 Mn) for determining from the detected biometric 

characteristics of a user information 

(fpadtxnfi, . . . ,FPAUTiNFn) serving for authentication or this 
user, 

4. The device as claimed in claim 3, the data-proacaaing 
means or wnich permits an authorised user to select from the 
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number of methods for determining authentication information 
from biumetriu characteristics a method desired by him. 

5. The devioe as claimed in one of the preceding claims with 
means for displaying authentication information (PPAUTINP) 
determined from biometric characteristics of a user. 

6. A method for the authentication of a user of a device, in 
which the user has the possibility of authenticating himself 
with the aid of uocr-opecif ic biometric characteristics or by 
input of authentication information via an information input 
device, in r.hn fir«r. ciasa hlonrntrlc charant.fir1i3r.1cfi of the 
user being detected by a sensor means and information serving 
for authentication being determined from the detected 
biometric characteristics and checked by a checking means, and 
in the second case the authentication information input by the 
user via the input device being checked by the same cheeking 
means • • 

7. The method for the authentication of a user of a device as 
claimed in claim 6 with the following otepoi 

a) the determination of a characteristic vector from 
measurement data ot a sensor means, 

b) a vector quantization of the characteristic vector 
determined! and 

c) checking of authentication information belonging to the 
result of the vector quantization. 

Fetherstonhaugh & Ca 
Ottawa, Canada 
Patent Agents 
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